{"instruction": "You are an expert in event extraction. Please extract events from the input that conform to the schema definition. Return an empty list for events that do not exist, and return NAN for arguments that do not exist. If an argument has multiple values, please return a list. Respond in the format of a JSON string.", "schema": [{"event_type": "patch vulnerability", "trigger": true, "arguments": ["supported platform", "vulnerable system version", "vulnerability", "issues addressed", "releaser", "time", "patch", "patch number"]}, {"event_type": "ransom", "trigger": true, "arguments": ["payment method", "damage amount", "victim", "attacker", "place", "price", "time", "attack pattern"]}, {"event_type": "phishing", "trigger": true, "arguments": ["trusted entity", "place", "attacker", "purpose", "tool", "damage amount", "time", "attack pattern"]}, {"event_type": "discover vulnerability", "trigger": true, "arguments": ["vulnerable system version", "vulnerability", "vulnerable system", "capabilities", "common vulnerabilities and exposures", "supported platform", "vulnerable system owner", "time"]}, {"event_type": "data breach", "trigger": true, "arguments": ["attacker", "purpose", "tool", "number of victim", "number of data", "place", "compromised data", "damage amount", "attack pattern"]}], "input": "Documents pretending to be from the U.S.National Security Agency , Iraqi intelligence , Russian security firm Kaspersky and the Kurdistan regional government were among those used to trick victims , Unit 42 said in a blog post ( goo.gl / SvwrXv ) ."}
{"patch vulnerability": [], "ransom": [], "phishing": [{"trigger": "pretending to be", "arguments": {"trusted entity": ["Iraqi intelligence", "the U.S.National Security Agency", "Russian security firm Kaspersky", "the Kurdistan regional government"], "place": "NAN", "attacker": "NAN", "purpose": "NAN", "tool": "Documents", "damage amount": "NAN", "time": "NAN", "attack pattern": "NAN"}}], "discover vulnerability": [], "data breach": []}